@githolon/dsl 0.108.0 → 0.108.2

package/dart/CHANGELOG.md

@@ -1,3 +1,8 @@
+## 0.65.1
+
+- Publish the generated nominal application call and query surfaces required by current DSL output, so
+  Flutter consumers retain typed USDA calls instead of falling back to legacy generic boundaries.
+
 ## 0.65.0
 
 - Consume the generated typed offer-admission ABI from `nomos_types` 0.9.0 and keep current birth

package/dart/lib/src/application_framework_calls.dart

@@ -0,0 +1,299 @@
+// AUTO-GENERATED by scripts/generate_framework_contracts.ts from authored DSL directives.
+// Do not edit: implementations are emitted from each application's composed USDA graph.
+import 'dart:convert' show utf8;
+import 'dart:typed_data' show Uint8List;
+import 'package:meta/meta.dart' show internal;
+import 'package:nomos_types/nomos_types.dart' show Sha256Digest;
+import 'package:nomos_types/nomos_kernel_protocol.dart' show BirthCertificate;
+
+import 'generated_call.dart';
+import 'result_usda.dart' show NmsUsdaLayer, NmsUsdaPrim;
+
+/// Compiler-generated framework value 'OwnedCustody'.
+/// Its canonical semantic representation is USDA; this class is the typed Dart view.
+final class OwnedCustody {
+  final String ct;
+  final String hpkeEpk;
+  final String keyCommitment;
+  final String principalWrappingPublic;
+  final OwnedDeviceRequest request;
+  final int v;
+
+  const OwnedCustody({
+    required this.ct,
+    required this.hpkeEpk,
+    required this.keyCommitment,
+    required this.principalWrappingPublic,
+    required this.request,
+    required this.v,
+  });
+
+  Uint8List encodeUsda() => Uint8List.fromList(utf8.encode(<String>[
+    '#usda 1.0',
+    '(',
+    '    defaultPrim = "FrameworkValue"',
+    ')',
+    '',
+    'def NomosFrameworkValue "FrameworkValue"',
+    '{',
+    "    def NomosOwnedCustody \"OwnedCustody\"",
+    "    {",
+    "        custom string nomos:ct = ${NmsUsdaLayer.quote(this.ct)}",
+    "        custom string nomos:hpkeEpk = ${NmsUsdaLayer.quote(this.hpkeEpk)}",
+    "        custom string nomos:keyCommitment = ${NmsUsdaLayer.quote(this.keyCommitment)}",
+    "        custom string nomos:principalWrappingPublic = ${NmsUsdaLayer.quote(this.principalWrappingPublic)}",
+    "        def NomosOwnedDeviceRequest \"Request\"",
+    "        {",
+    "            custom string nomos:principal = ${NmsUsdaLayer.quote(this.request.principal)}",
+    "            custom string nomos:scope = ${NmsUsdaLayer.quote(this.request.scope)}",
+    "            custom string nomos:signature = ${NmsUsdaLayer.quote(this.request.signature)}",
+    "            custom string nomos:signingPublic = ${NmsUsdaLayer.quote(this.request.signingPublic)}",
+    "            custom uint nomos:v = ${this.request.v}",
+    "            custom string nomos:workspace = ${NmsUsdaLayer.quote(this.request.workspace)}",
+    "            custom string nomos:wrappingPublic = ${NmsUsdaLayer.quote(this.request.wrappingPublic)}",
+    "        }",
+    "        custom uint nomos:v = ${this.v}",
+    "    }",
+    '}',
+    '',
+  ].join('\n')));
+
+  factory OwnedCustody.decodeUsda(Uint8List bytes) {
+    final root = NmsUsdaLayer.parse(bytes);
+    if (root.typeName != 'NomosFrameworkValue' || root.name != 'FrameworkValue' || root.properties.isNotEmpty || root.children.length != 1) throw const FormatException('Invalid framework value USDA');
+    return _nmsDecodeOwnedCustodyUsdaPrim(_nmsFrameworkUsdaChild(root, "NomosOwnedCustody", "OwnedCustody", "OwnedCustody"));
+  }
+}
+
+/// Compiler-generated framework value 'OwnedDeviceRequest'.
+/// Its canonical semantic representation is USDA; this class is the typed Dart view.
+final class OwnedDeviceRequest {
+  final String principal;
+  final String scope;
+  final String signature;
+  final String signingPublic;
+  final int v;
+  final String workspace;
+  final String wrappingPublic;
+
+  const OwnedDeviceRequest({
+    required this.principal,
+    required this.scope,
+    required this.signature,
+    required this.signingPublic,
+    required this.v,
+    required this.workspace,
+    required this.wrappingPublic,
+  });
+
+  Uint8List encodeUsda() => Uint8List.fromList(utf8.encode(<String>[
+    '#usda 1.0',
+    '(',
+    '    defaultPrim = "FrameworkValue"',
+    ')',
+    '',
+    'def NomosFrameworkValue "FrameworkValue"',
+    '{',
+    "    def NomosOwnedDeviceRequest \"Request\"",
+    "    {",
+    "        custom string nomos:principal = ${NmsUsdaLayer.quote(this.principal)}",
+    "        custom string nomos:scope = ${NmsUsdaLayer.quote(this.scope)}",
+    "        custom string nomos:signature = ${NmsUsdaLayer.quote(this.signature)}",
+    "        custom string nomos:signingPublic = ${NmsUsdaLayer.quote(this.signingPublic)}",
+    "        custom uint nomos:v = ${this.v}",
+    "        custom string nomos:workspace = ${NmsUsdaLayer.quote(this.workspace)}",
+    "        custom string nomos:wrappingPublic = ${NmsUsdaLayer.quote(this.wrappingPublic)}",
+    "    }",
+    '}',
+    '',
+  ].join('\n')));
+
+  factory OwnedDeviceRequest.decodeUsda(Uint8List bytes) {
+    final root = NmsUsdaLayer.parse(bytes);
+    if (root.typeName != 'NomosFrameworkValue' || root.name != 'FrameworkValue' || root.properties.isNotEmpty || root.children.length != 1) throw const FormatException('Invalid framework value USDA');
+    return _nmsDecodeOwnedDeviceRequestUsdaPrim(_nmsFrameworkUsdaChild(root, "NomosOwnedDeviceRequest", "Request", "OwnedDeviceRequest"));
+  }
+}
+
+NmsUsdaPrim _nmsFrameworkUsdaChild(NmsUsdaPrim prim, String typeName, String name, String path) {
+  final matches = prim.children.where((child) => child.typeName == typeName && child.name == name).toList(growable: false);
+  if (matches.length != 1) throw FormatException('$path must contain exactly one $typeName child');
+  return matches.single;
+}
+String _nmsFrameworkUsdaString(NmsUsdaPrim prim, String name, String path) { final value = prim.property(name); if (value is! String) throw FormatException('$path must be text'); return value; }
+int _nmsFrameworkUsdaInteger(NmsUsdaPrim prim, String name, String path) { final value = prim.property(name); if (value is! int) throw FormatException('$path must be an exact integer'); return value; }
+
+OwnedDeviceRequest _nmsDecodeOwnedDeviceRequestUsdaPrim(NmsUsdaPrim prim) {
+  if (prim.typeName != "NomosOwnedDeviceRequest" || prim.properties.length != 7 || prim.children.length != 0) throw const FormatException("Invalid OwnedDeviceRequest USDA");
+  return OwnedDeviceRequest(
+    principal: _nmsFrameworkUsdaString(prim, "nomos:principal", "OwnedDeviceRequest.principal"),
+    scope: _nmsFrameworkUsdaString(prim, "nomos:scope", "OwnedDeviceRequest.scope"),
+    signature: _nmsFrameworkUsdaString(prim, "nomos:signature", "OwnedDeviceRequest.signature"),
+    signingPublic: _nmsFrameworkUsdaString(prim, "nomos:signingPublic", "OwnedDeviceRequest.signingPublic"),
+    v: _nmsFrameworkUsdaInteger(prim, "nomos:v", "OwnedDeviceRequest.v"),
+    workspace: _nmsFrameworkUsdaString(prim, "nomos:workspace", "OwnedDeviceRequest.workspace"),
+    wrappingPublic: _nmsFrameworkUsdaString(prim, "nomos:wrappingPublic", "OwnedDeviceRequest.wrappingPublic"),
+  );
+}
+
+OwnedCustody _nmsDecodeOwnedCustodyUsdaPrim(NmsUsdaPrim prim) {
+  if (prim.typeName != "NomosOwnedCustody" || prim.properties.length != 5 || prim.children.length != 1) throw const FormatException("Invalid OwnedCustody USDA");
+  return OwnedCustody(
+    ct: _nmsFrameworkUsdaString(prim, "nomos:ct", "OwnedCustody.ct"),
+    hpkeEpk: _nmsFrameworkUsdaString(prim, "nomos:hpkeEpk", "OwnedCustody.hpkeEpk"),
+    keyCommitment: _nmsFrameworkUsdaString(prim, "nomos:keyCommitment", "OwnedCustody.keyCommitment"),
+    principalWrappingPublic: _nmsFrameworkUsdaString(prim, "nomos:principalWrappingPublic", "OwnedCustody.principalWrappingPublic"),
+    request: _nmsDecodeOwnedDeviceRequestUsdaPrim(_nmsFrameworkUsdaChild(prim, "NomosOwnedDeviceRequest", "Request", "OwnedCustody.request")),
+    v: _nmsFrameworkUsdaInteger(prim, "nomos:v", "OwnedCustody.v"),
+  );
+}
+
+@internal
+final class NmsInvitationMaterial {
+  final String source;
+  final String secret;
+  final String publicKey;
+
+  const NmsInvitationMaterial({
+    required this.source,
+    required this.secret,
+    required this.publicKey,
+  });
+
+  Uint8List encodeUsda() => Uint8List.fromList(utf8.encode(<String>[
+    '#usda 1.0',
+    '(',
+    '    defaultPrim = "Invitation"',
+    ')',
+    'def NomosInvitationMaterial "Invitation"',
+    '{',
+    '    custom token nomos:format = ${NmsUsdaLayer.quote("nomos-invitation-v1")}',
+    '    custom string nomos:source = ${NmsUsdaLayer.quote(source)}',
+    '    custom string nomos:secret = ${NmsUsdaLayer.quote(secret)}',
+    '    custom string nomos:publicKey = ${NmsUsdaLayer.quote(publicKey)}',
+    '}',
+    '',
+  ].join('\n')));
+
+  factory NmsInvitationMaterial.decodeUsda(Uint8List bytes) {
+    final root = NmsUsdaLayer.parse(bytes);
+    if (root.typeName != 'NomosInvitationMaterial' || root.name != 'Invitation' || root.children.isNotEmpty || root.properties.length != 4) {
+      throw const FormatException('Invalid Nomos invitation material USDA');
+    }
+    String property(String name) {
+      final value = root.property(name);
+      if (value is! String || value.isEmpty) throw FormatException('Invalid invitation material property $name');
+      return value;
+    }
+    if (property('nomos:format') != "nomos-invitation-v1") {
+      throw const FormatException('Unsupported Nomos invitation format');
+    }
+    return NmsInvitationMaterial(
+      source: property('nomos:source'),
+      secret: property('nomos:secret'),
+      publicKey: property('nomos:publicKey'),
+    );
+  }
+}
+
+@internal
+abstract interface class NmsApplicationFrameworkCalls {
+  String get applicationHomeDomain;
+
+  NmsGeneratedCall enrollFirstDevice({
+    required String domain,
+    required String workspace,
+    required String keyHash,
+    required String verifiedVia,
+    required int validFromEpoch,
+    required String grantedAt,
+    required String idpToken,
+    String? delegationCert,
+    BirthCertificate delegationCertificate,
+  });
+
+  NmsGeneratedCall enrollSigner({
+    required String domain,
+    required String workspace,
+    required String keyHash,
+    required String grantedBy,
+    required int grantedAt,
+    String? verifiedVia,
+  });
+
+  NmsGeneratedCall birthReceivingGroup({
+    required String domain,
+    required String workspace,
+    required String owner,
+    required Sha256Digest frameworkHash,
+    required Sha256Digest lawHash,
+    required String bornAt,
+    bool? inheritAuthProvider,
+  });
+
+  NmsGeneratedCall seedBirthPolicy({
+    required String domain,
+    required String workspace,
+    required int maxBirthsPerPrincipal,
+    required String setBy,
+    required String setAt,
+  });
+
+  NmsGeneratedCall enrollDelegation({
+    required String domain,
+    required String workspace,
+    required String user,
+    required String deviceKey,
+    required BirthCertificate certificate,
+    required String enrolledAt,
+  });
+
+  NmsGeneratedCall seedBirthAttestation({
+    required String domain,
+    required String workspace,
+    required String child,
+    required String founder,
+    required String verified,
+    required String parentId,
+    required String parentKey,
+    required int epoch,
+    required List<BirthCertificate> links,
+    List<String>? parentWorkspaceRoles,
+  });
+
+  NmsGeneratedCall seedGenesis({
+    required String domain,
+    required String workspace,
+    required String principal,
+    required String workspaceId,
+    required String bornAt,
+  });
+
+  NmsGeneratedCall seedReceivingGroupPolicy({
+    required String domain,
+    required String workspace,
+    required String setAt,
+  });
+
+  NmsGeneratedCall seedReceivingGroup({
+    required String domain,
+    required String workspace,
+    required String principal,
+    required String workspaceName,
+    required String bornAt,
+  });
+
+  NmsGeneratedCall redeemInvitation({
+    required String domain,
+    required String workspace,
+    required String directive,
+    required String orderId,
+    required String object,
+    required String relation,
+    required String invitationPublicKey,
+    required String invitationSignature,
+    required String invitationId,
+    required String redeemedAt,
+  });
+
+}

package/dart/lib/src/generated_call.dart

@@ -0,0 +1,96 @@
+import 'dart:typed_data';
+
+import 'package:meta/meta.dart' show internal;
+
+/// One compiler-authored, nominal domain call.
+///
+/// Generated applications construct this directly from their typed input. The
+/// host may carry it but cannot reinterpret its value; the kernel reopens the
+/// canonical USDA and verifies that [domain] and [directive] resolve to the
+/// exact identities embedded in [canonicalUsda].
+@internal
+abstract interface class NmsGeneratedCall {
+  String get domain;
+  String get directive;
+  Uint8List get canonicalUsda;
+}
+
+/// One compiler-authored nominal application query.
+///
+/// The public application method retains its generated Dart parameter types. This value is the
+/// cross-language continuation of those types: canonical USDA relates the query and every
+/// argument to the exact composed-law identities. Protobuf carries these bytes but does not
+/// replace the application's type system with a generic object.
+@internal
+abstract interface class NmsGeneratedQuery {
+  String get domain;
+  String get query;
+  Uint8List get canonicalArgumentsUsda;
+}
+
+/// Constructor namespace reserved for generated application code.
+///
+/// Keeping the three transport facts in one immutable value prevents generated
+/// code from accidentally pairing bytes from one directive with routing hints
+/// from another. Untrusted callers gain no authority by constructing one: the
+/// kernel independently validates the USDA against admitted law.
+@internal
+abstract final class NmsInternalGeneratedCalls {
+  static NmsGeneratedCall create({
+    required String domain,
+    required String directive,
+    required Uint8List canonicalUsda,
+  }) {
+    if (domain.isEmpty || directive.isEmpty) {
+      throw ArgumentError('A generated Nomos call needs nominal routing identity.');
+    }
+    if (canonicalUsda.isEmpty) {
+      throw ArgumentError('A generated Nomos call needs canonical USDA.');
+    }
+    return _GeneratedCall(domain, directive, canonicalUsda);
+  }
+}
+
+/// Constructor namespace reserved for generated query code.
+@internal
+abstract final class NmsInternalGeneratedQueries {
+  static NmsGeneratedQuery create({
+    required String domain,
+    required String query,
+    required Uint8List canonicalArgumentsUsda,
+  }) {
+    if (domain.isEmpty || query.isEmpty) {
+      throw ArgumentError('A generated Nomos query needs nominal routing identity.');
+    }
+    if (canonicalArgumentsUsda.isEmpty) {
+      throw ArgumentError('A generated Nomos query needs canonical USDA arguments.');
+    }
+    return _GeneratedQuery(domain, query, canonicalArgumentsUsda);
+  }
+}
+
+final class _GeneratedCall implements NmsGeneratedCall {
+  const _GeneratedCall(this.domain, this.directive, this.canonicalUsda);
+
+  @override
+  final String domain;
+
+  @override
+  final String directive;
+
+  @override
+  final Uint8List canonicalUsda;
+}
+
+final class _GeneratedQuery implements NmsGeneratedQuery {
+  const _GeneratedQuery(this.domain, this.query, this.canonicalArgumentsUsda);
+
+  @override
+  final String domain;
+
+  @override
+  final String query;
+
+  @override
+  final Uint8List canonicalArgumentsUsda;
+}

package/dart/lib/src/nms_generated_runtime.dart

@@ -7,6 +7,14 @@ library;
 import 'package:meta/meta.dart' show internal;
 
 export 'package:nomos_types/nomos_types.dart';
+export 'package:nomos_types/nomos_kernel_protocol.dart'
+    show
+        CustodyBreakDecision,
+        CustodyBreakResolved,
+        ModelDifferenceKind,
+        ModelLifecycleResponse,
+        ModelLifecycleStage,
+        WorkspaceSummary;
 export 'package:nomos_types/src/nomos_ref.dart' show NmsInternalNomosRefs;
 export 'package:nomos_types/src/versioned_nomos_ref.dart'
     show NmsInternalVersionedNomosRefs;
@@ -29,3 +37,24 @@ export 'session_bound.dart';
 export 'provider.dart';
 export 'record_origin.dart';
 export 'source_trust.dart';
+export 'generated_call.dart'
+    show
+        NmsGeneratedCall,
+        NmsGeneratedQuery,
+        NmsInternalGeneratedCalls,
+        NmsInternalGeneratedQueries;
+export 'application_framework_calls.dart' show OwnedCustody, OwnedDeviceRequest;
+export 'result_usda.dart'
+    show
+        NmsUsdaPrim,
+        NmsUsdaResult,
+        NmsUsdaConflictResult,
+        NmsUsdaConflictCount,
+        NmsUsdaConflictSummaryResult;
+export 'runtime_v2_transport.dart'
+    show
+        NomosKernelCallTransport,
+        NomosRuntimeV2Transport,
+        NomosRuntimeV2EventTransport,
+        NomosRuntimeV2KernelCalls,
+        NmsBufferedRuntimeEvents;

package/dart/lib/src/node_runner_transport.dart

@@ -18,13 +18,26 @@ import 'dart:io';
 
 import 'package:package_config/package_config.dart' show loadPackageConfigUri;
 
+import 'package:nomos_types/nomos_kernel_protocol.dart' as nomos_protocol;
+
+import 'runtime_v2_transport.dart'
+    show
+        NmsBufferedRuntimeEvents,
+        NomosRuntimeV2EventTransport,
+        NomosRuntimeV2KernelCalls,
+        NomosRuntimeV2Transport;
 import 'webview_bridge.dart' show BridgeTransport;
 
-class NodeRunnerTransport implements BridgeTransport {
+class NodeRunnerTransport
+    with NomosRuntimeV2KernelCalls
+    implements BridgeTransport, NomosRuntimeV2Transport, NomosRuntimeV2EventTransport {
   final Process _proc;
   final StreamController<Map<String, Object?>> _incoming =
       StreamController<Map<String, Object?>>.broadcast();
+  final NmsBufferedRuntimeEvents _runtimeEvents = NmsBufferedRuntimeEvents();
   final void Function(String line)? _onDiagnostic;
+  final Map<int, Completer<nomos_protocol.RuntimeResponse>> _runtimeReplies =
+      {};
   bool _disposed = false;
 
   NodeRunnerTransport._(this._proc, this._onDiagnostic) {
@@ -32,6 +45,33 @@ class NodeRunnerTransport implements BridgeTransport {
         (line) {
       final s = line.trim();
       if (s.isEmpty) return;
+      if (s.startsWith('runtime-v2:')) {
+        try {
+          final response = nomos_protocol.RuntimeResponse.fromBuffer(
+            base64Decode(s.substring('runtime-v2:'.length)),
+          );
+          _runtimeReplies
+              .remove(response.requestId.toInt())
+              ?.complete(response);
+        } catch (error, stackTrace) {
+          _diag('[nomos-node-runner runtime-v2] $error');
+          for (final reply in _runtimeReplies.values) {
+            if (!reply.isCompleted) reply.completeError(error, stackTrace);
+          }
+          _runtimeReplies.clear();
+        }
+        return;
+      }
+      if (s.startsWith('runtime-v2-event:')) {
+        try {
+          _runtimeEvents.add(nomos_protocol.RuntimeEvent.fromBuffer(
+            base64Decode(s.substring('runtime-v2-event:'.length)),
+          ));
+        } catch (error, stackTrace) {
+          _runtimeEvents.addError(error, stackTrace);
+        }
+        return;
+      }
       Object? decoded;
       try {
         decoded = jsonDecode(s);
@@ -140,16 +180,51 @@ class NodeRunnerTransport implements BridgeTransport {
   @override
   Stream<Map<String, Object?>> get messages => _incoming.stream;
 
+  @override
+  Stream<nomos_protocol.RuntimeEvent> get runtimeEvents => _runtimeEvents.stream;
+
   @override
   void send(Map<String, Object?> message) {
     if (_disposed) throw StateError('NodeRunnerTransport is disposed');
     _proc.stdin.writeln(jsonEncode(message));
   }
 
+  /// Exchange one exact generated Runtime v2 frame with the headless runner.
+  /// The line prefix/base64 is only stdio framing; the command and result are
+  /// protobuf and are never reconstructed as a JSON object or operation name.
+  @override
+  Future<nomos_protocol.RuntimeResponse> invokeRuntime(
+    nomos_protocol.RuntimeRequest request,
+  ) {
+    if (_disposed) throw StateError('NodeRunnerTransport is disposed');
+    final id = request.requestId.toInt();
+    if (_runtimeReplies.containsKey(id)) {
+      throw StateError('Runtime v2 request $id is already pending');
+    }
+    final reply = Completer<nomos_protocol.RuntimeResponse>();
+    _runtimeReplies[id] = reply;
+    try {
+      _proc.stdin.writeln(
+        'runtime-v2:${base64Encode(request.writeToBuffer())}',
+      );
+    } catch (error, stackTrace) {
+      _runtimeReplies.remove(id);
+      reply.completeError(error, stackTrace);
+    }
+    return reply.future;
+  }
+
   /// Tear down: stop the runner process and close the message stream.
   Future<void> dispose() async {
     if (_disposed) return;
     _disposed = true;
+    final pendingRuntime = _runtimeReplies.values.toList(growable: false);
+    _runtimeReplies.clear();
+    for (final reply in pendingRuntime) {
+      if (!reply.isCompleted) {
+        reply.completeError(StateError('NodeRunnerTransport is disposed'));
+      }
+    }
     try {
       await _proc.stdin.close();
     } catch (_) {}
@@ -159,5 +234,6 @@ class NodeRunnerTransport implements BridgeTransport {
       return -9;
     });
     await _incoming.close();
+    await _runtimeEvents.close();
   }
 }